Network Security Engineer

PlanetArt•Woodridge, IL

21h•$80,000 - $120,000•Hybrid

About The Position

PlanetArt is seeking a Network Security Engineer to support its Security Department. The role assesses network and server security, monitors security events, and investigates alerts involving Cisco technologies, Palo Alto firewalls, Windows and Linux servers, SIEM, and endpoint security tools. The engineer works with infrastructure teams to address security risks. Direct configuration of network devices and firewalls is outside the scope of the position. The position follows a hybrid work model: three days onsite and two days remote each week. Candidates must be local to or willing to relocate to the office area. The work is performed in an office environment and involves regular computer use and interaction with team members. Occasional travel may be required.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or equivalent experience.
3–5 years of experience in network security, security operations, incident response, or a related role.
Working knowledge of Cisco technologies and Palo Alto firewalls, including interpreting configurations, policies, and logs.
Understanding of TCP/IP, DNS, NAT, VPNs, and network segmentation.
Understanding of Windows and Linux server security, including hardening, patching, authentication, permissions, and audit logging.
Knowledge of SIEM log collection, forwarding, ingestion, parsing, correlation, and alert monitoring.
Experience with EDR configuration and investigation, including policies, detection settings, exclusions, endpoint telemetry, and response capabilities.
Ability to triage alerts, gather evidence, prioritize threats, and escalate incidents with clear documentation.
Strong analytical, troubleshooting, and communication skills, and ability to collaborate across security, network, and infrastructure teams.
Understanding of AI integration in security workflows, including validating AI-generated findings, protecting sensitive data, and maintaining analyst oversight.
Ability to develop, test, and document security scripts and tools using Python, PowerShell, or similar languages, including integrations with security tool APIs.
Must be local to or willing to relocate to the office area for the hybrid work model.

Nice To Haves

Splunk experience, including SPL searches, dashboards, and configuring and tuning alerts, thresholds, schedules, and notifications.

Responsibilities

Review Cisco and Palo Alto firewall policies, access controls, segmentation, VPNs, and security logs.
Assess Windows and Linux server hardening, patching, authentication, permissions, and audit logging.
Verify SIEM collection of firewall, network, server, and endpoint logs, and investigate logging gaps.
Monitor SIEM and EDR alerts for suspicious activity.
Triage alerts by validating detections, identifying false positives, assessing severity, and escalating incidents.
Correlate network, server, identity, and endpoint events to identify affected systems and timelines.
Configure EDR policies, detection settings, exclusions, and alerts through approved change procedures.
Coordinate incident containment and remediation with infrastructure teams and track issues to resolution.
Document investigations and response procedures, and evaluate AI use in analysis and detection.
Develop, test, and maintain security tools for log analysis, alert triage, and automation.
Recommend security improvements to teams responsible for network and server configuration.